ROS-20260922-73-0039

The vulnerability of the batadvtpsendercleanup function in the net/batman-adv/tpmeter.c module, which is part of the Linux kernel’s networking functions, is related to situations where there is a race condition in the signal handler. Exploiting this vulnerability could allow an attacker to...

ROS-20260922-73-0045

The vulnerability of the rt6fillnode function in the net/ipv6/route.c module of the IPv6 protocol implementation in the Linux operating system is related to the execution of a loop with an unreachable exit condition an “infinite loop”. Exploitation of this vulnerability could allow a remote...

ROS-20260922-73-0090

The vulnerability of the net/sched/actapi.c component in the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: shim (UTSA-2023-001491)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001491 advisory. ASN.1 strings are represented internally within OpenSSL as an ASN1STRING structure which contains a buffer holding the string data and a field holding the buffer...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-054049)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054049 advisory. Python 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no protection against multiple / at the beginning of URI path which may...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000575)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000575 advisory. Use after free in utfptr2char in GitHub repository vim/vim prior to 8.2.4646. Tenable has extracted the preceding description block directly from the Unity Linux...

Unity Linux 20.1070e Security Update: ghostscript (UTSA-2023-004048)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-004048 advisory. Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices with the %pipe% prefix or the | pipe character prefix. Tenable has extracted th...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: guava (UTSA-2023-002175)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002175 advisory. Use of Java's default temporary directory for file creation in FileBackedOutputStream in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ppp (UTSA-2023-000026)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-000026 advisory. DISPUTED A vulnerability classified as problematic has been found in ppp. Affected is the function dumpppp of the file pppdump/pppdump.c of the component pppdump. Th...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: firefox (UTSA-2023-002130)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002130 advisory. buildmodel in xmlparse.c in Expat aka libexpat before 2.4.3 has an integer overflow. Tenable has extracted the preceding description block directly from the Unity...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000579)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000579 advisory. Heap-based Buffer Overflow occurs in vim in GitHub repository vim/vim prior to 8.2.4563. Tenable has extracted the preceding description block directly from the Unit...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gnutls (UTSA-2024-005631)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-005631 advisory. An issue was discovered in GnuTLS before 3.6.15. A server can trigger a NULL pointer dereference in a TLS 1.3 client if a norenegotiation alert is sent with unexpect...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ntp (UTSA-2026-090102)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090102 advisory. ntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remote attackers to cause a denial of service memory consumption by sending packets, because memory...

Unity Linux 20.1070e Security Update: glibc (UTSA-2022-002147)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-002147 advisory. The deprecated compatibility function svcunixcreate in the sunrpc module of the GNU C Library aka glibc through 2.34 copies its path argument on the stack without...

ROS-20260922-73-0040

The vulnerability of the smcv2determineacceptedchid function in the net/smc/afsmc.c module of the SMC protocol family in the Linux operating system’s kernel is related to the use of pointers. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000566)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000566 advisory. Out-of-bounds Read in GitHub repository vim/vim prior to 8.2. Tenable has extracted the preceding description block directly from the Unity Linux security advisory...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-090113)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090113 advisory. In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because procpax lacks...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: poppler (UTSA-2023-002397)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002397 advisory. In Poppler 22.07.0, PDFDoc::savePageAs in PDFDoc.c callows attackers to cause a denial-of-service application crashes with SIGABRT by crafting a PDF file in which th...

ROS-20260922-73-0095

The vulnerability of the espintcpsendmsg function in the net/xfrm/espintcp.c module, which implements networking functions in the Linux kernel, relates to the issue of operations going beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: shim (UTSA-2023-001492)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001492 advisory. Calls to EVPCipherUpdate, EVPEncryptUpdate and EVPDecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum...